Hello,
I'm writting this post again since it didn't post... :shock: aah, so annoying...
Ok, basically I can't get ovpn to route anything, I need it cause I'm behind a proxy with basic authentication and can't torrent nor play online games
$ sudo openvpn --cd /opt/vpnbook --config config.ovpn
Fri Dec 11 23:16:18 2015 OpenVPN 2.3.2 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
Fri Dec 11 23:16:18 2015 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Dec 11 23:16:18 2015 NOTE: starting with OpenVPN 2.1, '--script-security 2' or higher is required to call user-defined scripts or executables
Fri Dec 11 23:16:18 2015 NOTE: --fast-io is disabled since we are not using UDP
Enter HTTP Proxy Username:Proxy_user
Enter HTTP Proxy Password:
Fri Dec 11 23:16:27 2015 Socket Buffers: R=[87380->131072] S=[16384->131072]
Fri Dec 11 23:16:27 2015 Attempting to establish TCP connection with [AF_INET]10.139.45.2:3128 [nonblock]
Fri Dec 11 23:16:28 2015 TCP connection established with [AF_INET] Proxy_IP Proxy_Port
Fri Dec 11 23:16:28 2015 Send to HTTP proxy: 'CONNECT 176.126.237.214:80 HTTP/1.0'
Fri Dec 11 23:16:28 2015 Attempting Basic Proxy-Authorization
Fri Dec 11 23:16:29 2015 HTTP proxy returned: 'HTTP/1.0 200 Connection established'
Fri Dec 11 23:16:31 2015 TCPv4_CLIENT link local: [undef]
Fri Dec 11 23:16:31 2015 TCPv4_CLIENT link remote: [AF_INET]10.139.45.2:3128
Fri Dec 11 23:16:31 2015 TLS: Initial packet from [AF_INET]10.139.45.2:3128, sid=f36a56fb bcfeb297
Fri Dec 11 23:16:32 2015 VERIFY OK: depth=1, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Fri Dec 11 23:16:32 2015 VERIFY OK: depth=0, C=CH, ST=Zurich, L=Zurich, O=vpnbook.com, OU=IT, CN=vpnbook.com, name=vpnbook.com, emailAddress=admin@vpnbook.com
Fri Dec 11 23:16:33 2015 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 11 23:16:33 2015 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 11 23:16:33 2015 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Fri Dec 11 23:16:33 2015 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Dec 11 23:16:33 2015 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri Dec 11 23:16:33 2015 [vpnbook.com] Peer Connection Initiated with [AF_INET]10.139.45.2:3128
Fri Dec 11 23:16:35 2015 SENT CONTROL [vpnbook.com]: 'PUSH_REQUEST' (status=1)
Fri Dec 11 23:16:36 2015 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 84.200.69.80,dhcp-option DNS 37.235.1.177,route 10.12.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.12.0.6 10.12.0.5'
Fri Dec 11 23:16:36 2015 OPTIONS IMPORT: timers and/or timeouts modified
Fri Dec 11 23:16:36 2015 OPTIONS IMPORT: --ifconfig/up options modified
Fri Dec 11 23:16:36 2015 OPTIONS IMPORT: route options modified
Fri Dec 11 23:16:36 2015 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Dec 11 23:16:36 2015 ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=eth0 HWADDR=00:26:2d:fb:40:45
Fri Dec 11 23:16:36 2015 TUN/TAP device tun3 opened
Fri Dec 11 23:16:36 2015 TUN/TAP TX queue length set to 100
Fri Dec 11 23:16:36 2015 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Dec 11 23:16:36 2015 /sbin/ip link set dev tun3 up mtu 1500
Fri Dec 11 23:16:36 2015 /sbin/ip addr add dev tun3 local 10.12.0.6 peer 10.12.0.5
Fri Dec 11 23:16:38 2015 /sbin/ip route add 10.139.45.2/32 via 192.168.1.1
Fri Dec 11 23:16:38 2015 /sbin/ip route add 0.0.0.0/1 via 10.12.0.5
Fri Dec 11 23:16:38 2015 /sbin/ip route add 128.0.0.0/1 via 10.12.0.5
Fri Dec 11 23:16:38 2015 /sbin/ip route add 10.12.0.1/32 via 10.12.0.5
Fri Dec 11 23:16:38 2015 WARNING: External program may not be called unless '--script-security 2' or higher is enabled. See --help text or man page for detailed info.
Fri Dec 11 23:16:38 2015 WARNING: Failed running command (--route-up): external program fork failed
Fri Dec 11 23:16:38 2015 Initialization Sequence Completed
My config.ovpn is from
http://www.vpnbook.com/
client
dev tun3
proto tcp
remote 176.126.237.214 80
remote euro214.vpnbook.com 80
resolv-retry infinite
nobind
persist-key
persist-tun
auth-nocache
auth-user-pass pass
comp-lzo
verb 3
http-proxy-retry
http-proxy Proxy_IP Proxy_port stdin basic
cipher AES-128-CBC
fast-io
pull
route-delay 2
redirect-gateway
route-up "/opt/vpnbook/route-up.sh"
down "/opt/vpnbook/down.sh"
#Certificates and key here
~ $ ip route show
0.0.0.0/1 via 10.12.0.105 dev tun3
default via 10.12.0.45 dev tun0 proto static
10.12.0.1 via 10.12.0.45 dev tun0 proto static
10.12.0.45 dev tun0 proto kernel scope link src 10.12.0.46
10.12.0.105 dev tun3 proto kernel scope link src 10.12.0.106
10.139.45.2 via 192.168.1.1 dev eth0 proto static
128.0.0.0/1 via 10.12.0.105 dev tun3
192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.120 metric 1
Prefererably i would set it up from network-manager-ovpn-gnome, as is more straight-forward but although the connections gets stablished it doesn't route either.
Please throw some light on this issue,
kind regards
